CVE-2023-29199 - vm2
The vm2 library used in several GitHub Actions and rootio projects may let attackers run code they should not be able to. Updated versions have been released that fix this risk.…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vm2 #GitHubActions #npm #CVE #infosec

CI should reduce uncertainty, not add ceremony. Keep the pipeline fast enough that developers trust it and small enough that failures point somewhere useful. #GitHubActions #DevOps #CICD

📢 Réactivation de GitHub Actions compromis : le payload Mini Shai-Hulud toujours actif

📅 Source : BleepingComputer, publié le 26 septembre 2026. Cet article rapporte une réactivation accidentelle de deux GitHub Actions…

🟡 vérification factuelle moyenne
#GitHubActions #MiniShaiHulud #Cyberveille

📢 Réactivation de GitHub Actions compromis : le payload Mini Shai-Hulud toujours actif pendant 9 jours

BleepingComputer, publié le 26 septembre 2026. L'article rapporte une réactivation accidentelle de deux GitHub Actions…

🟢 vérification factuelle haute
#GitHubActions #MiniShaiHulud #Cyberveille

Discover how the reopening of compromised GitHub Actions repositories reignited the Mini Shai-Hulud supply chain attack, exposing CI/CD secrets.

#MiniShaiHulud #GitHubActions #SupplyChainAttack #CyberSecurity #DevSecOps

CVE-2022-36067 - vm2
The vm2 software used in several projects can be tricked into running code it shouldn’t. This could let an attacker take control of your system or data. Update to the latest…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vm2 #GitHubActions #npm #CVE #infosec

Xで見つけたURLをDiscordやSlackへ保存するAndroidアプリを自作した

#Android #Kotlin #個人開発 #Webhook #GitHubActions

📰 GitHub Actions Kembali Diaktifkan Saat Payload Mini Shai-Hulud Masih Aktif

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/28/github-actions-mini-shai-hulud-payload-malware/

#ci/cd #cybersecurity #developerSecurity #github #githubActions #keamananSiber #malware #miniShai-hulu

Blogged: Troubleshooting GitHub Package NuGet feeds with GitHub

Make sure you configure the actions/setup-dotnet action correctly to set up the right .NET SDK and authenticate to a GitHub Packages NuGet feed.

david.gardiner.net.au/2026/09/acti...

#dotnet #GitHubActions #NuGet

A release workflow should be boring on purpose: deterministic inputs, visible versioning, reproducible builds, explicit approvals where risk is high, and a rollback path everyone understands. #GitHubActions #ReleaseEngineering #DevOps

Node 20 Is No Longer Available in GitHub Actions, by (not on Mastodon or Bluesky):

https://github.blog/changelog/2026-09-23-node-20-is-no-longer-available-in-github-actions/?ref=frontenddogma.com

#nodejs #githubactions

GitHub Actions removed Node 20 on Sept 23, 2026. Find old action releases, migrate runs.using to node24, and check unsupported macOS/ARM32 runners: https://codereportglobal.indevs.in/articles/github-actions-node20-node24-fix #GitHubActions #DevOps

CI security baseline: give workflow tokens the minimum permissions each job needs. “It runs in GitHub” does not make every action or pull request trustworthy by default. #GitHubActions #DevSecOps #CICD

Two compromised actions-cool GitHub Actions came back online and resumed delivering Mini Shai-Hulud payloads after mutable tags pointed to malicious code, underscoring the need for SHA pinning. #actionscool #MiniShaiHulud #GitHubActions

Heads up, folks! GitHub Actions is rolling out changes to how query results appear in both the API and the UI. Might be worth checking your dashboards and automated scripts soon to see if anything shifts. 💻 #GitHubActions #DevOps

Disabled GitHub Actions relaunched Mini Shai-Hulud malware via old tags—mutable tags strike again in the supply chain. #SupplyChain #GitHubActions #MiniShaiHulud #Security #DevSecOps https://thedailytechfeed.com/disabled-github-actions-reactivated-resurrecting-mini-shai-hulud-threat/

Optimizing GitHub Actions for Agent PRs: Speculative Test Slicing and AST Impact Analysis, by (not on Mastodon or Bluesky):

https://www.sitepoint.com/optimize-github-actions-agent-prs-test-slicing/?ref=frontenddogma.com

#githubactions #aiagents #ai #testing #codereviews